Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0be1222520 advisory.

    Apply proposed fix for CVE-2026-26740.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:9693 advisory.

    * JDK: Enhance crypto algorithm support (CVE-2026-22007)

    * JDK: Improved Arena allocations (CVE-2026-22008)

    * JDK: Improve Kerberos credentialing (CVE-2026-22013)

    * JDK: Enhance Path Factories Redux (CVE-2026-22016)

    * JDK: Enhance Zip file reading (CVE-2026-22018)

    * JDK: Enhance certificate chain validation (CVE-2026-22021)

    * JDK: Updating FreeType 2.14.1 (CVE-2026-23865)

    * JDK: Enhance TLS connection handling (CVE-2026-34282)

    * JDK: Enhance key generation (CVE-2026-34268)

    This release also updates a number of third-party libraries included in the JDK.  The libraries themselves     are affected by the following CVEs, but this is not a statement that the JDK itself is affected:

    * giflib: Denial of Service via buffer overflow in EGifGCBToExtension (CVE-2026-26740)

    * libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette     expansion (CVE-2026-33636)

    * libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416)

    Bug Fix(es):

    * When copying files, OpenJDK 25 prefers to use the copy_file_range native function for performance     reasons, only falling back to sendfile when this fails.  However, in previous OpenJDK 25 releases, a     response of EOPNOTSUPP (operation not supported) did not cause the JDK to fall back to sendfile.  This is     rectified in this release. (Rocky Linux-169939, Rocky Linux-169937)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-562:06 advisory.

    * JDK: Enhance crypto algorithm support (CVE-2026-22007)
      * JDK: Improved Arena allocations (CVE-2026-22008)
      * JDK: Improve Kerberos credentialing (CVE-2026-22013)
      * JDK: Enhance Path Factories Redux (CVE-2026-22016)
      * JDK: Enhance Zip file reading (CVE-2026-22018)
      * JDK: Enhance certificate chain validation (CVE-2026-22021)
      * JDK: Updating FreeType 2.14.1 (CVE-2026-23865)
      * JDK: Enhance TLS connection handling (CVE-2026-34282)
      * JDK: Enhance key generation (CVE-2026-34268)     This release also updates a number of third-party libraries included in the JDK. The libraries themselves     are affected by the following CVEs, but this is not a statement that the JDK itself is affected:
      * giflib: Denial of Service via buffer overflow in EGifGCBToExtension (CVE-2026-26740)
      * libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette     expansion (CVE-2026-33636)
      * libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:9693 advisory.

    * JDK: Enhance crypto algorithm support (CVE-2026-22007)
      * JDK: Improved Arena allocations (CVE-2026-22008)
      * JDK: Improve Kerberos credentialing (CVE-2026-22013)
      * JDK: Enhance Path Factories Redux (CVE-2026-22016)
      * JDK: Enhance Zip file reading (CVE-2026-22018)
      * JDK: Enhance certificate chain validation (CVE-2026-22021)
      * JDK: Updating FreeType 2.14.1 (CVE-2026-23865)
      * JDK: Enhance TLS connection handling (CVE-2026-34282)
      * JDK: Enhance key generation (CVE-2026-34268)


    This release also updates a number of third-party libraries included in the JDK. The libraries themselves     are affected by the following CVEs, but this is not a statement that the JDK itself is affected:

      * giflib: Denial of Service via buffer overflow in EGifGCBToExtension (CVE-2026-26740)
      * libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette     expansion (CVE-2026-33636)
      * libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416)


    Bug Fix(es):

      * When copying files, OpenJDK 25 prefers to use the copy_file_range native function for performance     reasons, only falling back to sendfile when this fails. However, in previous OpenJDK 25 releases, a     response of EOPNOTSUPP (operation not supported) did not cause the JDK to fall back to sendfile. This is     rectified in this release. (AlmaLinux-169939, AlmaLinux-169937)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-9693 advisory.

    [1:25.0.3.0.9-1.0.1]
    - Add Oracle vendor bug URL [Orabug: 34340155]

    [1:25.0.3.0.9-1]
    - Update to jdk-25.0.3+9 (GA)
    - Update release notes to 25.0.3+9
    - Update FIPS patch to 57722aab802 version synced with 25.0.3+8
    - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream
    - Drop local HarfBuzz patch now JDK-8375057 is included upstream
    - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158
    - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078
    - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047
    - Bump zlib version to 1.3.2 following JDK-8378631
    - Bump tzdata version to 2026a following JDK-8379035
    - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
    - Sync the copy of the portable specfile with the latest update
    - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
    - Resolves: RHEL-169620
    - Resolves: RHEL-157091
    - Resolves: RHEL-161217
    - Resolves: RHEL-161333
    - Resolves: RHEL-169613

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:9693 advisory.

    The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software     Development Kit.

    Security Fix(es):

    * JDK: Enhance crypto algorithm support (CVE-2026-22007)

    * JDK: Improved Arena allocations (CVE-2026-22008)

    * JDK: Improve Kerberos credentialing (CVE-2026-22013)

    * JDK: Enhance Path Factories Redux (CVE-2026-22016)

    * JDK: Enhance Zip file reading (CVE-2026-22018)

    * JDK: Enhance certificate chain validation (CVE-2026-22021)

    * JDK: Updating FreeType 2.14.1 (CVE-2026-23865)

    * JDK: Enhance TLS connection handling (CVE-2026-34282)

    * JDK: Enhance key generation (CVE-2026-34268)

    This release also updates a number of third-party libraries included in the JDK.  The libraries themselves     are affected by the following CVEs, but this is not a statement that the JDK itself is affected:

    * giflib: Denial of Service via buffer overflow in EGifGCBToExtension (CVE-2026-26740)

    * libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette     expansion (CVE-2026-33636)

    * libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416)

    Bug Fix(es):

    * When copying files, OpenJDK 25 prefers to use the copy_file_range native function for performance     reasons, only falling back to sendfile when this fails.  However, in previous OpenJDK 25 releases, a     response of EOPNOTSUPP (operation not supported) did not cause the JDK to fall back to sendfile.  This is     rectified in this release. (RHEL-169939, RHEL-169937)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:9254 advisory.

    The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java     Software Development Kit.

    This release contains OpenJDK 11 with Extended Lifecycle Support for Red Hat Enterprise Linux versions 7,     8, and 9.

    Security Fix(es):

    * JDK: LIBPNG: out-of-bounds read in png_image_read_composite (CVE-2025-66293)
    * JDK: LIBPNG: Information disclosure and denial of service via integer truncation in simplified write API     (CVE-2026-22801)
    * JDK: LIBPNG: has a heap buffer overflow in png_set_quantize (CVE-2026-25646)
    * JDK: GIFLIB: Denial of Service via buffer overflow in EGifGCBToExtension (CVE-2026-26740)
    * JDK: LIBPNG: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416)
    * JDK: LIBPNG: Information disclosure and denial of service via out-of-bounds read/write in Neon palette     expansion (CVE-2026-33636)
    * JDK: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read     (CVE-2026-22695)

    * JDK: (CVE-2026-22007)
    * JDK: (CVE-2026-22016)
    * JDK: (CVE-2026-22013)
    * JDK: (CVE-2026-22018)
    * JDK: (CVE-2026-22021)
    * JDK: (CVE-2026-34268)
    * JDK: (CVE-2026-34282)
    * JDK: (CVE-2026-23865)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via     the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its     allocated size. (CVE-2026-26740)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
317989	Fedora 44 : giflib (2026-0be1222520)	Nessus	Fedora Local Security Checks	high
316341	RockyLinux 10 : java-25-openjdk (RLSA-2026:9693)	Nessus	Rocky Linux Local Security Checks	high
313428	MiracleLinux 9 : java-25-openjdk-25.0.3.0.9-1.el9.ML.1 (AXSA:2026-562:06)	Nessus	Miracle Linux Local Security Checks	high
310149	AlmaLinux 10 : java-25-openjdk (ALSA-2026:9693)	Nessus	Alma Linux Local Security Checks	high
310026	Oracle Linux 10 / 9 : java-25-openjdk (ELSA-2026-9693)	Nessus	Oracle Linux Local Security Checks	high
309745	RHEL 10 / 9 : java-25-openjdk (RHSA-2026:9693)	Nessus	Red Hat Local Security Checks	high
309659	RHEL 7 / 8 / 9 : Java 11 OpenJDK ELS Security Update (Important) (RHSA-2026:9254)	Nessus	Red Hat Local Security Checks	high
302946	Linux Distros Unpatched Vulnerability : CVE-2026-26740	Nessus	Misc.	high

Detections

Analytics

CVE-2026-26740

high

Tenable Plugins

high

high

high

high

high

high

high

high